{"id":710,"date":"2026-10-26T03:49:58","date_gmt":"2026-10-26T03:49:58","guid":{"rendered":"https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/"},"modified":"2026-10-26T03:49:58","modified_gmt":"2026-10-26T03:49:58","slug":"set-up-spf-dkim-dmarc","status":"publish","type":"page","link":"https:\/\/sitefitters.com\/fr\/learn\/guides\/set-up-spf-dkim-dmarc\/","title":{"rendered":"How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land in Spam"},"content":{"rendered":"<section class=\"sfl-hero sfl-hero-s\"><div class=\"sfl-w\"><div class=\"sfl-bc\"><a href=\"\/learn\/\">Learn<\/a> \/ <a href=\"\/learn\/guides\/\">How-To Guides<\/a><\/div><h1>How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land <em>in Spam<\/em><\/h1><div class=\"sfl-lead\"><p>SPF, DKIM and DMARC are three short DNS records that prove your emails really come from your business. In this guide you will add all three, check that they pass, and set a safe starting policy that you can tighten later.<\/p><p>This is no longer optional. Gmail requires every sender to use SPF or DKIM, and larger senders to use all three. Yahoo and Microsoft Outlook have similar rules. Without them, your quotes, invoices and replies are more likely to land in spam or be rejected, and scammers can more easily send fake emails in your name.<\/p><\/div><div class=\"sfl-meta\"><span>\u23f1 30 minutes<\/span><span>\u25ce Intermediate<\/span><span>\u2630 8 steps<\/span><span>\u21bb Updated Oct 2026<\/span><\/div><\/div><\/section><div class=\"sfl-w sfl-art sfl-art3\"><nav class=\"sfl-toc\" aria-label=\"On this page\"><b>On this page<\/b><a href=\"#need\">What you need<\/a><a href=\"#steps\">Steps<\/a><a href=\"#mistakes\">Common mistakes<\/a><a href=\"#faq\">FAQ<\/a><\/nav><article class=\"sfl-prose\"><div class=\"sfl-box sfl-need\" id=\"need\"><h4>What you need<\/h4><ul><li>Access to your domain&#8217;s DNS settings or cPanel<\/li><li>A list of every service that sends email as your domain<\/li><li>Admin access to your email provider<\/li><li>An inbox for DMARC reports<\/li><\/ul><\/div><h2 id=\"steps\">Steps<\/h2><div class=\"sfl-step\"><b>1<\/b><div><h3>List everything that sends your email<\/h3><p>Write down every service that sends mail using your domain. That includes your mailbox provider, your website&#8217;s contact forms, your newsletter tool, your invoicing or booking software and your CRM. Each one needs to be covered by SPF or DKIM, or its messages will fail the checks. Missing a service here is the most common reason a setup breaks later.<\/p><\/div><\/div><div class=\"sfl-step\"><b>2<\/b><div><h3>Check your current status<\/h3><p>If your email and DNS are on cPanel hosting, go to Email, then Email Deliverability. It shows each domain and flags problems with DKIM, SPF and reverse DNS. If your DNS lives elsewhere, use a free online SPF and DMARC checker, or open your registrar&#8217;s DNS settings and look for TXT records that start with v=spf1 or v=DMARC1.<\/p><\/div><\/div><div class=\"sfl-step\"><b>3<\/b><div><h3>Create one SPF record<\/h3><p>SPF is a TXT record on your root domain that lists the servers allowed to send your mail. It starts with v=spf1, then includes each service, then ends with ~all or -all. For example, v=spf1 include:_spf.google.com ~all for Google Workspace. Each service tells you what to add. Combine them all into one record, because two SPF records on the same domain cause both to fail.<\/p><div class=\"sfl-tip\"><b>Tip:<\/b> SPF allows only 10 DNS lookups, so remove services you no longer use.<\/div><\/div><\/div><div class=\"sfl-step\"><b>4<\/b><div><h3>Turn on DKIM signing<\/h3><p>DKIM adds a hidden digital signature to each message. You switch it on inside each sending service, which then gives you a TXT or CNAME record to publish. In cPanel, Email Deliverability creates the DKIM key and offers a Repair button when your host runs your DNS. Google Workspace and Microsoft 365 have their own DKIM settings in the admin center. Use a 2048-bit key when offered.<\/p><\/div><\/div><div class=\"sfl-step\"><b>5<\/b><div><h3>Use cPanel&#8217;s Repair or Copy option<\/h3><p>In Email Deliverability, click Manage next to your domain. If your server controls your DNS, click Repair and confirm the suggested records. If your DNS is hosted at your registrar or another provider, Repair is unavailable. Instead, click Copy next to the suggested SPF or DKIM record and paste the name and value into your registrar&#8217;s DNS settings as new TXT records.<\/p><\/div><\/div><div class=\"sfl-step\"><b>6<\/b><div><h3>Add a DMARC record<\/h3><p>DMARC tells receiving servers what to do when a message fails SPF and DKIM, and where to send reports. Add a TXT record with the name _dmarc and a value like v=DMARC1; p=none; rua=mailto:dmarc@yourbusiness.com. The p=none policy only monitors, so nothing is blocked while you learn. Use an inbox you check, or a free DMARC report service, for the address.<\/p><div class=\"sfl-tip\"><b>Tip:<\/b> DMARC only works once SPF and DKIM are already in place.<\/div><\/div><\/div><div class=\"sfl-step\"><b>7<\/b><div><h3>Test and read your reports<\/h3><p>Wait an hour or so, then send a test email to a Gmail account. Open it, choose Show original from the menu, and look for SPF, DKIM and DMARC marked PASS. Over the next two to four weeks, review the DMARC reports. They show which services send mail as your domain and whether each one passes. Fix any legitimate service that fails before moving on.<\/p><\/div><\/div><div class=\"sfl-step\"><b>8<\/b><div><h3>Tighten your DMARC policy<\/h3><p>Once every real sender passes, change p=none to p=quarantine, which sends failing mail to spam. After a few more weeks with no problems, you can move to p=reject, which blocks fake mail outright. This stops scammers from sending invoices or password requests that appear to come from your business. Go slowly, because a strict policy will also block a real service you forgot.<\/p><\/div><\/div><h2 id=\"mistakes\">Common Mistakes<\/h2><ul class=\"sfl-mk\"><li>Publishing two separate SPF records instead of combining every service into one, which makes SPF fail for all of them.<\/li><li>Jumping straight to a p=reject DMARC policy before checking reports, which blocks real invoices or form emails.<\/li><li>Forgetting the website contact form or newsletter tool, so those messages fail authentication and land in spam.<\/li><\/ul><h2 id=\"faq\">FAQ<\/h2><details class=\"sfl-faq\" open><summary>Do small businesses really need DMARC?<\/summary><p>Yes. Gmail and Yahoo require DMARC for anyone sending 5,000 or more messages a day, and Microsoft Outlook has a similar rule. Even if you send far less, DMARC helps your mail get delivered and makes it much harder for criminals to send fake emails in your name to your customers.<\/p><\/details><details class=\"sfl-faq\"><summary>What is the difference between ~all and -all in SPF?<\/summary><p>Both end your SPF record. The ~all version, called soft fail, tells servers that mail from unlisted servers is suspicious. The -all version, called hard fail, says it should be rejected. Soft fail is the safer starting point, since DMARC then decides the final action based on your chosen policy.<\/p><\/details><details class=\"sfl-faq\"><summary>How long do these records take to work?<\/summary><p>New DNS records usually start working within an hour, but some can take up to 48 hours to reach every mail server. cPanel&#8217;s Email Deliverability tool may take a few minutes to recheck after a repair. Send a test message after a few hours and check the results in the message headers.<\/p><\/details><\/article><aside class=\"sfl-aside\"><div class=\"sfl-box sfl-box-o\"><h4>Want email set up for you?<\/h4><p>We set up business email on your domain, with SPF, DKIM and DMARC so it reaches the inbox.<\/p><a class=\"sfl-btn sfl-btn-w\" href=\"\/contact-us\/\">Talk to us<\/a><\/div><div class=\"sfl-box\"><h4>Terms in this guide<\/h4><div class=\"sfl-rel\"><a href=\"\/learn\/glossary\/spf-record\/\">SPF record<\/a><a href=\"\/learn\/glossary\/dkim\/\">DKIM<\/a><a href=\"\/learn\/glossary\/dmarc\/\">DMARC<\/a><a href=\"\/learn\/glossary\/email-deliverability\/\">Email deliverability<\/a><a href=\"\/learn\/glossary\/txt-record\/\">TXT record<\/a><a href=\"\/learn\/glossary\/business-email\/\">Business email<\/a><a href=\"\/learn\/glossary\/dns-record\/\">DNS record<\/a><a href=\"\/learn\/glossary\/smtp\/\">SMTP<\/a><\/div><\/div><div class=\"sfl-box\"><h4>More guides<\/h4><div class=\"sfl-rel sfl-col\"><a href=\"\/learn\/guides\/choose-and-register-a-domain-name\/\">How to Choose and Register a Domain Name for Your Business<\/a><a href=\"\/learn\/guides\/point-your-domain-to-your-website\/\">How to Point Your Domain to Your Website (DNS Records Explained)<\/a><a href=\"\/learn\/guides\/set-up-business-email-on-your-domain\/\">How to Set Up Business Email on Your Own Domain<\/a><a href=\"\/learn\/guides\/install-ssl-and-force-https\/\">How to Install an SSL Certificate and Force HTTPS<\/a><\/div><\/div><\/aside><\/div><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Do small businesses really need DMARC?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. Gmail and Yahoo require DMARC for anyone sending 5,000 or more messages a day, and Microsoft Outlook has a similar rule. Even if you send far less, DMARC helps your mail get delivered and makes it much harder for criminals to send fake emails in your name to your customers.\"}},{\"@type\":\"Question\",\"name\":\"What is the difference between ~all and -all in SPF?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Both end your SPF record. The ~all version, called soft fail, tells servers that mail from unlisted servers is suspicious. The -all version, called hard fail, says it should be rejected. Soft fail is the safer starting point, since DMARC then decides the final action based on your chosen policy.\"}},{\"@type\":\"Question\",\"name\":\"How long do these records take to work?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"New DNS records usually start working within an hour, but some can take up to 48 hours to reach every mail server. cPanel's Email Deliverability tool may take a few minutes to recheck after a repair. Send a test message after a few hours and check the results in the message headers.\"}}]}<\/script>","protected":false},"excerpt":{"rendered":"<p>Learn \/ How-To Guides How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land in Spam SPF, DKIM and DMARC are three short DNS records that prove your emails really come from your business. In this guide you will add all three, check that they pass, and set a safe starting policy [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":533,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"sitefitters-canvas.php","meta":{"_acf_changed":false,"_yoast_wpseo_title":"How to Set Up SPF, DKIM and DMARC for Business Email","_yoast_wpseo_metadesc":"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel's Email Deliverability tool and a safe DMARC rollout.","sfb_learn":"1","footnotes":""},"class_list":["post-710","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.7 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to Set Up SPF, DKIM and DMARC for Business Email<\/title>\n<meta name=\"description\" content=\"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel&#039;s Email Deliverability tool and a safe DMARC rollout.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sitefitters.com\/fr\/learn\/guides\/set-up-spf-dkim-dmarc\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Set Up SPF, DKIM and DMARC So Your Emails Don&#039;t Land in Spam\" \/>\n<meta property=\"og:description\" content=\"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel&#039;s Email Deliverability tool and a safe DMARC rollout.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sitefitters.com\/fr\/learn\/guides\/set-up-spf-dkim-dmarc\/\" \/>\n<meta property=\"og:site_name\" content=\"Sitefitters\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/set-up-spf-dkim-dmarc\\\/\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/set-up-spf-dkim-dmarc\\\/\",\"name\":\"How to Set Up SPF, DKIM and DMARC for Business Email\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#website\"},\"datePublished\":\"2026-10-26T03:49:58+00:00\",\"description\":\"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel's Email Deliverability tool and a safe DMARC rollout.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/set-up-spf-dkim-dmarc\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/set-up-spf-dkim-dmarc\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/set-up-spf-dkim-dmarc\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Business Website 101\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How-To Guides\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land in Spam\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#website\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/\",\"name\":\"Sitefitters\",\"description\":\"Custom Websites, Apps &amp; WHMCS experts\",\"publisher\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sitefitters.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#organization\",\"name\":\"Sitefitters\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/sitefitters-logo-elephant-dot.png\",\"contentUrl\":\"https:\\\/\\\/sitefitters.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/sitefitters-logo-elephant-dot.png\",\"width\":717,\"height\":140,\"caption\":\"Sitefitters\"},\"image\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Set Up SPF, DKIM and DMARC for Business Email","description":"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel's Email Deliverability tool and a safe DMARC rollout.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sitefitters.com\/fr\/learn\/guides\/set-up-spf-dkim-dmarc\/","og_locale":"fr_FR","og_type":"article","og_title":"How to Set Up SPF, DKIM and DMARC So Your Emails Don't Land in Spam","og_description":"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel's Email Deliverability tool and a safe DMARC rollout.","og_url":"https:\/\/sitefitters.com\/fr\/learn\/guides\/set-up-spf-dkim-dmarc\/","og_site_name":"Sitefitters","twitter_card":"summary_large_image","twitter_misc":{"Dur\u00e9e de lecture estim\u00e9e":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/","url":"https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/","name":"How to Set Up SPF, DKIM and DMARC for Business Email","isPartOf":{"@id":"https:\/\/sitefitters.com\/#website"},"datePublished":"2026-10-26T03:49:58+00:00","description":"Stop business emails landing in spam. Add SPF, DKIM and DMARC records in plain steps, including cPanel's Email Deliverability tool and a safe DMARC rollout.","breadcrumb":{"@id":"https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/sitefitters.com\/learn\/guides\/set-up-spf-dkim-dmarc\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sitefitters.com\/"},{"@type":"ListItem","position":2,"name":"Business Website 101","item":"https:\/\/sitefitters.com\/learn\/"},{"@type":"ListItem","position":3,"name":"How-To Guides","item":"https:\/\/sitefitters.com\/learn\/guides\/"},{"@type":"ListItem","position":4,"name":"How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land in Spam"}]},{"@type":"WebSite","@id":"https:\/\/sitefitters.com\/#website","url":"https:\/\/sitefitters.com\/","name":"Sitefitters","description":"Custom Websites, Apps &amp; WHMCS experts","publisher":{"@id":"https:\/\/sitefitters.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sitefitters.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/sitefitters.com\/#organization","name":"Sitefitters","url":"https:\/\/sitefitters.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/sitefitters.com\/#\/schema\/logo\/image\/","url":"https:\/\/sitefitters.com\/wp-content\/uploads\/2026\/10\/sitefitters-logo-elephant-dot.png","contentUrl":"https:\/\/sitefitters.com\/wp-content\/uploads\/2026\/10\/sitefitters-logo-elephant-dot.png","width":717,"height":140,"caption":"Sitefitters"},"image":{"@id":"https:\/\/sitefitters.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/comments?post=710"}],"version-history":[{"count":0,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/710\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/533"}],"wp:attachment":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/media?parent=710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}